CVS commit: pkgsrc/net/unbound

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Wed Jul 16 21:53:27 UTC 2025

Modified Files:
        pkgsrc/net/unbound: Makefile distinfo

Log Message:
Update net/unbound to version 1.23.1.

Pkgsrc changes:
 * Adjust checksums

Upstream changes:

This security release fixes the Rebirthday Attack CVE-2025-5994.

This re-opens up resolvers to a birthday paradox, for EDNS client
subnet servers that respond with non-ECS answers. It only affects
Unbound when compiled with --enable-subnet, and subnetmod is enabled
with config options that send ECS information to upstream servers.

The CVE is described here
https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt

We would like to thank Xiang Li (AOSP Lab, Nankai University) for
discovering and responsibly disclosing the vulnerability.


To generate a diff of this commit:
cvs rdiff -u -r1.126 -r1.127 pkgsrc/net/unbound/Makefile
cvs rdiff -u -r1.85 -r1.86 pkgsrc/net/unbound/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/unbound/Makefile
diff -u pkgsrc/net/unbound/Makefile:1.126 pkgsrc/net/unbound/Makefile:1.127
--- pkgsrc/net/unbound/Makefile:1.126   Thu Jul  3 06:28:34 2025
+++ pkgsrc/net/unbound/Makefile Wed Jul 16 21:53:27 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.126 2025/07/03 06:28:34 wiz Exp $
+# $NetBSD: Makefile,v 1.127 2025/07/16 21:53:27 he Exp $
 
-DISTNAME=      unbound-1.23.0
-PKGREVISION=   1
+DISTNAME=      unbound-1.23.1
 CATEGORIES=    net
 MASTER_SITES=  https://nlnetlabs.nl/downloads/unbound/
 

Index: pkgsrc/net/unbound/distinfo
diff -u pkgsrc/net/unbound/distinfo:1.85 pkgsrc/net/unbound/distinfo:1.86
--- pkgsrc/net/unbound/distinfo:1.85    Thu Apr 24 21:29:08 2025
+++ pkgsrc/net/unbound/distinfo Wed Jul 16 21:53:27 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.85 2025/04/24 21:29:08 he Exp $
+$NetBSD: distinfo,v 1.86 2025/07/16 21:53:27 he Exp $
 
-BLAKE2s (unbound-1.23.0.tar.gz) = 8bbb0f4887b103c362ebbae5ac4d3b5c20230a443a38e5d27a50377db82c3a75
-SHA512 (unbound-1.23.0.tar.gz) = 9b5ca48f4f5189f168f76396f5895f39262a4333e589f8c64bb9298a55c6266f626a4a4399370c68edd9f6318215a401146bf9e16a101c54decf623668a398af
-Size (unbound-1.23.0.tar.gz) = 6770860 bytes
+BLAKE2s (unbound-1.23.1.tar.gz) = c33081f2cd1aaa9ec7fce2233670b87eb7f7488d5eb6e22dbf25accb8141ff85
+SHA512 (unbound-1.23.1.tar.gz) = b31858eb03fed1fb2aead03aa5b6f32476678067c28ff4816808cbdcae32591e36bee966b25c6b702e3fb51588ae467efab7934a24971193f1183edd5c561b7b
+Size (unbound-1.23.1.tar.gz) = 6771025 bytes
 SHA1 (patch-configure) = 0779bb9174e358163430fa0b05e81c464776b12f